Private funnel QA — real backend, execution locked

This is a separate administrator QA route, not the public landing page or synthetic preview. It does not activate intake. All provider and record-changing controls are code-locked OFF.

The callback security hold remains unresolved. Readiness reports configuration shape only; a present credential is not proof of access, delivery, callback authentication, or launch readiness.

Private setup · Separate synthetic preview (unchanged)